Do SECMGRs have duties of CSO, CMCO and SSO?

• A. No, they do not have the duties of CSO, CMCO, or SSO
• B. Yes, they must perform CSO duties
• C. Only CSO duties
• D. Only CMCO duties

Answer: (A)

The key idea is that role boundaries define who is responsible for which duties. A SECMGR oversees the security program at their level—developing policies, coordinating security efforts, and ensuring procedures are followed. CSO, CMCO, and SSO are separate, specialized roles with their own distinct authorities and responsibilities. Those duties aren’t part of a SECMGR’s default scope unless a policy explicitly assigns dual-hatted or temporary responsibilities to them. In practice you would still rely on the designated CSO, CMCO, and SSO to perform their specific tasks, while the SECMGR supports and coordinates across those roles. That’s why the statement that SECMGRs do not automatically carry those duties is the best fit.